diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 3abd5fc40e8..70fc3672a9e 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -55,7 +55,7 @@ jobs:
         with:
           go-version: stable
       - uses: sigstore/cosign-installer@v3.4.0
-      - uses: anchore/sbom-action/download-syft@v0.15.8
+      - uses: anchore/sbom-action/download-syft@v0.15.9
       - name: setup-validate-krew-manifest
         run: go install sigs.k8s.io/krew/cmd/validate-krew-manifest@latest
       - name: setup-tparse
diff --git a/.github/workflows/nightly-oss.yml b/.github/workflows/nightly-oss.yml
index 0ceb7346ad6..059e66ce490 100644
--- a/.github/workflows/nightly-oss.yml
+++ b/.github/workflows/nightly-oss.yml
@@ -29,7 +29,7 @@ jobs:
         with:
           go-version: stable
       - uses: sigstore/cosign-installer@v3.4.0
-      - uses: anchore/sbom-action/download-syft@v0.15.8
+      - uses: anchore/sbom-action/download-syft@v0.15.9
       - uses: crazy-max/ghaction-upx@v3
         with:
           install-only: true
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 272dc80a03e..546d5382ed6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -97,7 +97,7 @@ jobs:
             ./dist/*.apk
           key: ${{ github.ref }}
       - uses: sigstore/cosign-installer@v3.4.0
-      - uses: anchore/sbom-action/download-syft@v0.15.8
+      - uses: anchore/sbom-action/download-syft@v0.15.9
       - uses: crazy-max/ghaction-upx@v3
         with:
           install-only: true